NVD - Results

Sort results by:

Search Results (Refine Search)

Search Parameters:

Results Type: Overview
Keyword (text search): cpe:2.3:a:zzcms:zzcms:4.0:*:*:*:*:*:*:*
CPE Name Search: true

There are 7 matching records.

Displaying matches 1 through 7.

Vuln ID	Summary	CVSS Severity
CVE-2021-43703	An Incorrect Access Control vulnerability exists in zzcms less than or equal to 2019 via admin.php. After disabling JavaScript, you can directly access the administrator console. Published: December 09, 2021; 12:15:08 PM -0500	V3.1: 9.8 CRITICAL V2.0: 7.5 HIGH
CVE-2019-1010153	zzcms 8.3 and earlier is affected by: SQL Injection. The impact is: sql inject. The component is: zs/subzs.php. Published: July 23, 2019; 10:15:12 AM -0400	V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH
CVE-2019-1010152	zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: user/manage.php line 31-80. Published: July 23, 2019; 10:15:12 AM -0400	V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH
CVE-2019-1010150	zzcms 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: getshell. The component is: /user/zssave.php. Published: July 23, 2019; 10:15:12 AM -0400	V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH
CVE-2019-1010149	zzcms version 8.3 and earlier is affected by: File Delete to Code Execution. The impact is: zzcms File Delete to Code Execution. The component is: user/licence_save.php. Published: July 23, 2019; 10:15:12 AM -0400	V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH
CVE-2019-1010148	zzcms version 8.3 and earlier is affected by: SQL Injection. The impact is: zzcms File Delete to Code Execution. Published: July 23, 2019; 10:15:12 AM -0400	V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH
CVE-2018-1000653	zzcms version 8.3 and earlier contains a SQL Injection vulnerability in zt/top.php line 5 that can result in could be attacked by sql injection in zzcms in nginx. This attack appear to be exploitable via running zzcms in nginx. Published: August 20, 2018; 3:31:44 PM -0400	V3.0: 9.8 CRITICAL V2.0: 7.5 HIGH